Техническая информация
- 'C:\7za.exe' a ftp.7z \ftp\
- 'C:\Update.exe'
- '<SYSTEM32>\xcopy.exe' /y wand.dat C:\ftp\Opera
- '<SYSTEM32>\attrib.exe' +h ftp.7z
- '<SYSTEM32>\systeminfo.exe'
- '<SYSTEM32>\cmd.exe' /c ""C:\Setup.bat" "
- '<SYSTEM32>\attrib.exe' +h Update.exe
- C:\ftp\Mozilla\key3.db
- C:\ftp\info\systeminfo.txt
- C:\ftp.7z
- C:\ftp\Mozilla\signons.sqlite
- C:\Update.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- C:\7za.exe
- C:\Setup.bat
- C:\ftp.7z
- C:\Update.exe
- C:\ftp\Mozilla\key3.db
- C:\ftp\Mozilla\signons.sqlite
- C:\7za.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- C:\ftp\info\systeminfo.txt
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'